Vulnerabilidades de VMware VMware Telco Cloud Platform (CVE)

8.0Alta

CVE-2026-41724 hace 5 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

8.0Alta

CVE-2026-41723 hace 5 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

8.0Alta

CVE-2026-41722 hace 5 meses

VMSA-2026-0004: VMware Cloud Foundation Operations updates address multiple vulnerabilities (CVE-2026-41722, CVE-2026-41723 and CVE-2026-41724)

VMware VCF operations; VMware VMware Aria Operations; VMware VMware Telco Cloud Platform

VMware Cloud Foundation Operations contains multiple stored cross-site scripting vulnerabilities.A malicious actor with privileges to create policies, views or text-widgets may be able to inject scripts to perform administrative actions in VMware Cloud Founda…

6.2Media

CVE-2026-22721 hace 8 meses

VMware Aria Operations privilege escalation vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with privileges in vCenter to access Aria Operations may leverage this vulnerability to obtain administrative access in VMware Aria Operations. To remediate CVE-2026-22721…

8.0Alta

CVE-2026-22720 hace 8 meses

VMware Aria Operations stored cross-site scripting vulnerability

VMware VMware Aria Operations; VMware VMware Cloud Foundation Operations; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains a stored cross-site scripting vulnerability. A malicious actor with privileges to create custom benchmarks may be able to inject script to perform administrative actions in VMware Aria Operations. To remediate CVE-2026-22720,…

4.9Media

CVE-2025-41245 hace 1 año

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VMware Aria Operations; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform; VMware VMware Telco Cloud Infrastructure

VMware Aria Operations contains an information disclosure vulnerability. A malicious actor with non-administrative privileges in Aria Operations may exploit this vulnerability to disclose credentials of other users of Aria Operations.

7.8Alta

CVE-2025-41244 KEV hace 1 año

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

VMware VCF operations; VMware VMware tools; VMware VMware Aria Operations; VMware VMware Cloud Foundation

VMware Aria Operations and VMware Tools contain a local privilege escalation vulnerability. A malicious local actor with non-administrative privileges having access to a VM with VMware Tools installed and managed by Aria Operations with SDMP enabled may explo…

16%EPSS

8.2Alta

CVE-2025-22249 hace 1 año

VMSA-2025-0008: VMware Aria automation updates address a DOM based Cross-site scripting vulnerability (CVE-2025-22249)

VMware Vmware Aria Automation; VMware VMware Cloud Foundation; VMware VMware Telco Cloud Platform

VMware Aria automation contains a DOM based Cross-Site Scripting (XSS) vulnerability. A malicious actor may exploit this issue to steal the access token of a logged in user of VMware Aria automation appliance by tricking the user into clicking a malicious cra…